policy: support negation